28b6efdf4fb613405f9d7558daba2b80_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28b6efdf4fb613405f9d7558daba2b80_NeikiAnalytics.exe
Size

7KB
MD5

28b6efdf4fb613405f9d7558daba2b80
SHA1

a25f60f1ea3339fe08225c2f04e997696ea2cded
SHA256

54bc856cf1714dcf77f4f87e0809280d19a241b9a11dd2863d77f5caa6236079
SHA512

80147ef8e863b34c9629254310f36fe440c59b75cf0a4e880fde5c7addbda1d8f0c1e679cfc2673bbea75ffb87c32295ca7988e63e7598079e1c62c894b51eac
SSDEEP

192:MQ3FRkwnzisbCr2QAdkv4sk5txjOoLxhTkB:+4zisGEjhKB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28b6efdf4fb613405f9d7558daba2b80_NeikiAnalytics.exe

Files

28b6efdf4fb613405f9d7558daba2b80_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

411c26819234a12cc52aaaf849f1d844

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
VirtualAlloc
CloseHandle
CreateFileW
DeleteFileW
GetFileSize
GetModuleFileNameW
GetTempPathW
GetCurrentDirectoryW
ReadFile
WriteFile
lstrlenW
lstrcmpW
SleepEx

wininet

InternetOpenW
InternetConnectW
HttpOpenRequestW
HttpSendRequestW
InternetCloseHandle
InternetReadFile

shell32

ShellExecuteW

ntdll

RtlDecompressBuffer
swprintf

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ